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Constructing Curves over Finite Fields 
with Many Points 
by Solving Linear Equations 

Gerard van der Geer & Marcel van der Vlugt 



The purpose of this note is to exhibit an elementary method to construct explicitly 
curves over finite fields with many points. Despite its elementary character the method 
is very efficient and can be regarded as a partial substitute for the use of class field 
theory Many of the results on the existence of curves with a large number of points 
obtained from class field theory or Drinfeld modules can thus be reproduced with explicit 
curves and many new examples can easily be obtained. Curves with many points find 
applications in coding theory and the theory of low-discrepancy sequences and here 
explicitness is often essential. 



The Method 

Let k = F q be a finite field of cardinality q = p m with p prime. We consider fibre 
products Cf over a base curve C of Artin-Schreier extensions Cf — > C defined by 
^| function field extensions k(Cf) = k(C)(z), where z satisfies an equation z p — z = f and 
/ runs through a basis of functions / G F with F a suitable F p -vectorspace of k(C). 
In order to get a curve Cp with many points we shall start with a curve C over k with 
. many rational points. We select a (large) set of distinct rational points V on C and 
an effective divisor D defined over k whose support is disjoint from V . We consider a 
Fp-vector space 

F C L(D) = {ge k{C) : (g) + D > 0} U {0} 
of functions / satisfying 

i) Fn{f-g:gek[C)} = {0h 

ii) Tr 9/p (/(P)) = for all PeV, 

where T^ q / P is the trace map from ¥ q to ¥ p . The fibre product Cp is a covering of C in 
which all the rational points P G V are completely split by ii), so that we may expect 
many points. The genus of Cp is determined by the genera of the building blocks Cf 
with / G F — {0} and these follow from the Hurwitz-Zeuthen formula. A sensible choice 
of D must be made in order to keep the genus of Cf relatively small. Linear algebra 
gives estimates for the dimensions of subspaces F satisfying i) and ii). 
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Covers of Curves 



Let C be a smooth complete irreducible curve defined over k and suppose that /i, . . . , f r 
is a basis of a space of functions F satisfying condition i). Each curve Cf defined by 
the equation zf — Zi = fi is an irreducible cover of C; up to C-isomorphism the fibre 
product 

C F = C fl x c x . . . x c C fr 

does not depend on the chosen basis. The Jacobian J(Cp) of Cf decomposes up to 
isogeny as product 

j(c)x n p f , 

/6P(F) 

where Pf is the Prym variety of Cf — > C (i.e. the connected component of the kernel of 
the norm map Nm : J(Cf) — * J(C)). The sum is over a complete set of representatives 
f E F modulo the equivalence relation / ~ cf with c G F* (which we write as / G P(F)). 

If we denote the trace of Frobenius of C (resp. C/, Cf) by r (resp. 77, tf) then we 
find the relation 

T F = T+ ^ ( T f ~ T ) 

/eP(F) 

from which we can compute the number of points of Cf- The genus of Cf is given 
similarly by 

g(C F )=g(C)+ (g(Cf)-g(C)). 

/6P(F) 

Curves arising from Spaces of Solutions 

To guarantee that we have sufficiently many functions we use Riemann-Roch. Let 
V = {P 1 , . . . , P n } be the set of k = F g -rational points on C. For an effective divisor 
D = J^uqQ defined over ¥ q we denote by [D/p] the divisor J2[ u q/p\Q with [x] the 
greatest integer function. We set 

5 = #(Supp(D) n n 

Proposition 1. For a curve C and a divisor D as above there exists for every integer 
r with 

1 < r < dim Fp (L(D)) - dim ¥p (L([D/p}) + 1 - n + 5 

a W p -subspace F r C L(D) of dimension r such that for f G F r — {0} the curve Cf 
satis&es 

#C f (W q )=p(n-6) + e f , 

where tf > is the number of rational points of Cf lying over points in Supp(L>). 

Proof Let F denote an algebraic closure of ¥ q . From [V] it follows that the ¥ p - vector 
space 

V = {/ G L(D): f = g p - g for some g G F (C)} 
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has dimension diniF p (L([D/p])). Choose now a linear F p -space W C L(D) with WfW = 
{0} and with dimension dim Fp (L(L>)) —dimp (L([D/p])). Let c G ¥ q with Tr g / p (c) 7^ 0, 
set 

W = W © F p ■ c 
and solve in W the linear equations 

r ft q /p(f(Pi)) = for all Pi £ Supp(D). (1) 

The solution space of this homogeneous system of linear equations over F p has dimension 
> dim W — (n — 5). The equations (1) express the condition that all the points Pj which 
do not belong to Supp(D) are completely split. This gives the expression for #C/(F g ). 
□ 

We now form the fibre product Cp associated to a space of solutions F of (1) and 
we obtain: 

Corollary. With the notations as in Proposition 1 there exists for every r with 

1 < r < dim Fp (L(D)) - dim Fp (L([£>/p])) + 1 - n + 5 
a r -dimensional subspace F r C L(D) such that 

#C Fr (F q )=p r (n-5)+5+ ( e /-^)- 

/eP(F r ) 

Remark. For f E F r , f ^ the Hurwitz-Zeuthen formula implies: 

2g(C f ) - 2 = p(2g(C) - 2) + (p - 1) + 1) deg(Q)), 

Q 

where the summation is over those Q in Supp(D) with — fg(/) > 0. Here Vq(f) denotes 
the Artin-Schreier reduced order at the pole of / in Q. 

Examples 

Examples can now be obtained in a straightforward way. By considering the special 

cases 

D = 2Q with Q a point of degree d on C, 
D = kP with k G Z >0 and P a rational point of C, 
D = 2P + 2Q with P and Q as above, 

one can reproduce, but in explicit form, many of the examples given in the papers 
of Niederreiter and Xing (see References). There the curves were implicitly given by 
subfields of narrow ray class fields determined by Drinfeld modules of rank 1 over a 
curve. However, if the base curve has genus > 1 it is rather difficult to find explicit 
forms of the curves. The same holds for examples constructed by class field theory in 
[L], [Sch] and [Sl,2]. 
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Example 1. In [S3] Serre constructed curves C over F 2 with invariants (g(C), #C(F 2 )) 
= (10, 13), (11, 14) and (13, 15) as covers of the elliptic curve E defined by y 2 +y = x 3 +x 
using the group structure of P(F 2 ). We show how these examples can be recovered with 
our method. The rational points of E are Poo, P\ = (0, 0), P 2 = (1, 0), P3 = (1, 1) and 
P 4 = (0, 1). Consider the space W for D = ZP^ + Pi + P 3 with F 2 -basis 

1, x, y, x/(x + y), xy/(x + y). 

We now require in W that P 2 and P4 are completely split. The solution space of (1) 
has basis fi = x + x/(x + y), / 2 = 1 + x + y and fs = xy/(x + y). The 2-dimensional 
F 2 -subspace F = / 2 + f 3 ) yields a curve of genus 10 with 13 points. 

With D = 3Poo + 3P 4 we can take W = {l,y/x,x,y,y/{x{x + y + 1)). Then 
F = (1 + y/x + x + y, (xy + y 2 )/x(x + y + 1)) yields the example with (g, #) = (11, 14). 

With D = 7 Poo + P4 and splitting {Pi,P 2 ,P 3 } we find a 3-dimensional space 
H = (l+x + y + y/x,y + xy, y + x 2 y). The subspace F = (l + x + y + y/x,xy + x 2 y) 
produces a curve Cf with (g(Cp), #C*f(F 2 )) = (13,15). Other 2-dimensional spaces 
produce curves with (g,#) = (11, 13), (12, 13), (13, 13), (14, 13), (14, 14) and (14,15). 
The curve C H has {g{C H ), #C H (F 2 )) = (29, 25). 

Example 2 i) . Consider the elliptic curve C defined by y s — y = x 2 — 1 over F 3 with 
#C(F 3 ) = 7. Letting P^ = (0 : 1 : 0), Q = (1, 0) and D = 8Poo + 2Q we can take W 
with F 3 -basis 

1, (y + 2)/(2x + y + l),(x + y + l)/y, y,x + 2, y 2 , (x + 2)y, (x + 2)y 2 , (x + 2) 2 y. 
We solve in W for the remaining 5 rational points Pi (i = 1, . . . , 5) of C the equations 

Tr 3/3 (/(P)) = /(P)=0 z = l,...,5 
and we get a 4-dimensional solution space F generated by 

2/ + 2 2, V + 2 x + y + 1 

f 1 = o 1 1 1 + y + x + y , h = , , 1 + + x + 2x v, 

2x + y + 1 2x + y + 1 y 

h = 2+ V + 2 +y + 2y 2 +xy 2 , and / 4 = 2y + x 2 y 
2x + y + 1 

with the following curves 



fi = 


g(c fi ) 




fl 


9 


17 


h 


10 


17 


h 


12 


17 


h 


10 


19 



Analyzing the subspaces of F we obtain the following table, in which under N q (g) we 
list the best curve so far and the Oesterle upper bound (cf. [G-V]). 
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F 




#Cf(F 3 )) 


N q {g) 


(/l,/2> 


35 


47 


[38 - 51] 


(A + 2/3,/4) 


36 


46 


[36 - 52] 


(/l,/ 3 ) 


39 


46 


[42 - 56] 


(A, A, /3) 


128 


136 


< 149 



Example 2 ii). Consider again the elliptic curve C given by y 3 — y = x 2 — 1 over F3 
with ^C(¥s) = 7. Let D be the divisor 3Q with Q a point of degree 4 on C given by 
the ideal (x 2 + xy + l, x 4 + x 3 + 2). This is the Frobenius orbit of (a, a 3 + a 9 ). Requiring 
that the 7 rational points are completely split leads to a 2-dimensional space F with 
basis 

I + /2 + 2/3 + 2/2 + /I + / 3 2 and 2 + A 2 + /| + /1 / 2 / 3 , 

where /1 = (2x+y)/(x 2 +xy+l), f 2 = (2x 2 +l)/(x 2 +xy+l), f 3 = (2x 2 +y 2 )/(x 2 +xy+l). 
Then C F is a curve of genus 49 and #C F (F 3 ) = 63. (Best result so far N q (g) e [49-67].) 

Example 3. Let F4 = F2(a) and let C be the elliptic curve defined by y 2 + y = x 3 
with ^C(F4) = 9. We use = (0:1:0) and set D — UPoo- Elementary calculations 
give diniF 2 (W/) = 13 and we may take as a F 2 -basis: 

W = (a, x, ax, y, ay, xy, axy, x y,ax y,y ,ay ,xy , axy ). 

Splitting the 8 rational points different from yields 8 equations in 12 variables with 
a 5-dimensional solution space. We list properties of the curves Cf i corresponding to a 
basis fi (i = 1, . . . , 5) of the solution space in the following table: 



fi = 


g(c fi ) 


#C/ i (F 4 ) 


x + xy + x 2 y 


5 


17 


ax + axy + a 2 x 2 y 


5 


17 


y 3 


6 


17 


x + xy 3 


7 


17 


ax + axy 3 


7 


17 



The corresponding fibre products yield the following harvest: 



F 


g(C F ) 


#^f(F 4 )) 


N q (g) 


comments 


(/i,/ 2 ) 


13 


33 


33 


best possible 


(/l,/3> 


15 


33 


< 37 


cf. Ex. 4.14 in [N-Xl] 


(fi, f2, h) 


33 


65 


< 66 


cf. [L] 


(fi, h, A) 


37 


65 


< 72 


cf. [N-X2] 


(fi, fs, A) 


39 


65 


< 75 


new 



By employing this method systematically one can expect a substantial number of 
examples improving the tables (cf. [G-V]). We refer to work in progress by V. Shabat. 
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